Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39352e302f32342d3234203d3e20313939343837.roa
File:                     3139302e39332e39352e302f32342d3234203d3e20313939343837.roa (raw, json)
Hash identifier:          3nIg9EIn3agB3C7WOjKFT0Lqi4itixguAVhVVLAtEG4=
Subject key identifier:   8A:EF:A4:10:FB:9B:50:3E:BD:F4:F9:12:1A:FB:46:BE:54:92:65:60
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       26E07F2A0C049C3129D6510F27A902539F1934B5
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39352e302f32342d3234203d3e20313939343837.roa
Signing time:             Wed 26 Jun 2024 12:10:00 +0000
ROA not before:           Wed 26 Jun 2024 12:05:00 +0000
ROA not after:            Wed 25 Jun 2025 12:10:00 +0000
asID:                     199487
IP address blocks:        190.93.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e0:7f:2a:0c:04:9c:31:29:d6:51:0f:27:a9:02:53:9f:19:34:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jun 26 12:05:00 2024 GMT
            Not After : Jun 25 12:10:00 2025 GMT
        Subject: CN=8AEFA410FB9B503EBDF4F9121AFB46BE54926560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:af:bb:a5:6f:c8:c7:b7:26:35:8f:57:25:16:
                    bb:98:fc:31:96:25:51:1c:8c:a9:70:f7:5e:89:cb:
                    56:62:a8:d0:4e:b2:ac:c4:c4:45:e2:e6:a2:d7:dd:
                    ca:4e:8f:ca:9c:32:eb:38:0b:63:cd:b2:41:f6:9f:
                    10:f3:cb:35:08:57:98:f1:c3:21:c0:6e:f1:6a:3b:
                    2a:89:f9:f9:3e:3b:08:26:19:6b:d1:ba:a9:5e:8a:
                    7a:eb:79:5a:0b:cc:68:1e:1a:22:13:03:50:e6:70:
                    8a:30:1b:77:46:9c:8a:e4:90:ca:e0:1f:2e:dd:44:
                    c4:78:17:f7:89:56:60:3f:d8:bb:45:03:90:c2:77:
                    0b:2c:d9:9c:eb:72:55:08:7a:4e:c1:a6:86:69:a3:
                    80:53:bd:90:4b:ee:d7:45:cd:dd:36:33:30:46:d9:
                    71:e3:af:a9:37:20:21:77:71:e2:0f:b5:7b:a7:bd:
                    5e:e7:4f:58:f2:38:4e:80:95:3b:df:6f:a1:d0:62:
                    45:dc:67:13:eb:c1:85:f3:75:ef:fe:70:64:67:ba:
                    68:9a:4e:26:48:12:ea:1e:e9:42:02:7c:b8:59:6e:
                    9b:5a:44:9b:b2:cd:89:6c:f5:85:9c:bb:71:10:de:
                    b5:e4:a9:15:98:82:d6:63:00:bf:54:a0:1a:7f:ff:
                    af:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EF:A4:10:FB:9B:50:3E:BD:F4:F9:12:1A:FB:46:BE:54:92:65:60
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39352e302f32342d3234203d3e20313939343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:a3:70:fc:e5:56:b3:11:ec:d9:87:33:45:3b:7b:f6:81:da:
         4b:76:40:97:9a:22:d1:79:95:a4:09:9d:3e:bc:6b:7e:46:09:
         16:97:e6:d7:1f:12:88:5e:1e:0b:18:a8:4c:33:c9:7f:9a:c7:
         38:49:f5:26:8c:bd:e5:d7:a7:ad:78:2c:28:78:85:6d:08:57:
         01:66:c9:15:db:a7:bd:72:e8:30:e2:5b:6e:12:62:fe:ab:1a:
         a9:c8:b1:78:c0:d8:f1:99:b1:f6:a9:99:3b:f0:c1:3c:67:5b:
         39:e4:24:23:9e:03:f0:c5:25:6e:9d:58:d2:74:43:e1:0a:a1:
         0d:df:e0:aa:4a:22:ab:cf:95:4e:2f:9c:63:86:24:07:6c:26:
         0b:d4:b9:96:66:dd:8f:44:27:88:b8:9c:cc:c9:f0:18:48:91:
         24:f1:f8:3a:07:c3:f7:ef:86:b6:2f:61:9b:dc:ee:6e:c6:a2:
         ca:b7:b0:e4:6e:30:e3:96:f8:a8:01:bf:1f:0a:02:fc:fa:d0:
         86:27:f9:44:e9:b3:ab:36:65:f5:85:c6:a4:3e:67:24:82:aa:
         82:24:55:e9:c3:41:e0:5a:a9:18:9c:0a:a6:56:50:92:79:31:
         53:1b:05:c1:ef:dc:ab:38:bd:1a:d7:6c:7d:67:55:2e:1e:36:
         0a:43:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:03 2024 by rpki-client on console-ams.rpki-client.org